
Originally Posted by
dlink website
How to set VPN passthrough
Note that this router is not a VPN router, it can not establish VPN tunnels. It can only pass VPN traffic through. Normally you do not have to set anything up in the router in regards to VPN passthrough.
Log into the router and under Advanced > Firewall disable IKE service filtering (IKE from External Network).
It may happen that your VPN application requires certain ports to be opened in the router. You can do it under Advanced > Port Forwarding. In most cases it is 1723 TCP or 500 UDP. If you do not know which ports to open you can enable DMZ and it will pass all the traffic through to the specified private IP address.
How to open ports:
Step 1 Open your web browser and enter the IP address of the router (10.1.1.1). Enter user name (admin) and your password (admin).
Step 2 Add LAN Client (Workstation) into the router before you can open any ports. Go to Advanced > LAN Clients. Type in the IP address of the Workstation (e.g. 10.1.1.3). You can specify the name of this workstation under Host Name (optional). Click Add and then Apply.
Step 3 Go to Advanced > Virtual Server (Port Forwarding). Under 'LAN IP' select your LAN Client (which you added in Step 2). This is the computer where the VPN traffic will be redirected to.
Step 4 Under 'Category' select 'VPN' by clicking the tick box (radio button).
Step 5 Under 'Available Rules' dialog box, click on the 'IPSEC L2TP' or 'PPTP', depending on what VPN protocol you are using. Click the Add button.
Then click on the Apply button.
Step 6 To save the new settings into the router's memory go to Tools > (System) > Save & Reboot. Click on Save & Reboot button. The router will save the settings and restart.
Because our routers use NAT (Network Address Translation), you can only open a specific port to one computer at a time.
Note that the computer/device you are opening ports for should have static IP:
Under Control Panel > Network Connections > Local Area Connection > Properties > Internet protocol TCP/IP > Properties:
IP address: 10.1.1.3
Subnet mask: 255.0.0.0
Gateway: 10.1.1.1
DNS: 202.129.64.198 (or whichever your provider is using)
Check if your VPN software requires any adjustments when used with NAT device (firewall).
Make sure that private IP addresses on your network are all on different subnets compared to the remote network you are connecting to.